Behavioral task
behavioral1
Sample
e67fadeb81baafe4fe00bb6489e6ced018a0b4c759da15ebeb19100c5f5713b0.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
e67fadeb81baafe4fe00bb6489e6ced018a0b4c759da15ebeb19100c5f5713b0.exe
Resource
win10v2004-20230220-en
General
-
Target
e67fadeb81baafe4fe00bb6489e6ced018a0b4c759da15ebeb19100c5f5713b0
-
Size
656KB
-
MD5
0094f3f04f2830f0e3bc7bd2cc7af774
-
SHA1
6b90d9e5e83792f3fc57935c27e81e04d50641c5
-
SHA256
e67fadeb81baafe4fe00bb6489e6ced018a0b4c759da15ebeb19100c5f5713b0
-
SHA512
cc03b29404182dcbba6614cc16666882708b5008a1f26aebd7c7e1e602aa9877a00757ca5319d73bfb572f82304a2c89c7cef55f0a3c072d733b644558f69018
-
SSDEEP
12288:cveyZyXMRmRv8mPjOn30Wma756AiK7iCeB6FOEt8FOBxjYLzx2yNDcmbhP7nfd:GeyYXMRmiEO1ma0mEB6MEL8LdVtbhPTd
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource e67fadeb81baafe4fe00bb6489e6ced018a0b4c759da15ebeb19100c5f5713b0 unpack001/out.upx
Files
-
e67fadeb81baafe4fe00bb6489e6ced018a0b4c759da15ebeb19100c5f5713b0.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 644KB - Virtual size: 644KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 160KB - Virtual size: 156KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 44KB - Virtual size: 42KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 72KB - Virtual size: 86KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1.9MB - Virtual size: 1.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ